Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/E4flgD7bLIBptnfcRSImsx5L57g.roa
File: E4flgD7bLIBptnfcRSImsx5L57g.roa (raw, json)
Hash identifier: U9JOog2wqa5hQUvuyPoezsKKnv4GSQSvPSzl78ggYSY=
Subject key identifier: 13:87:E5:80:3E:DB:2C:80:69:B6:77:DC:45:22:26:B3:1E:4B:E7:B8
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 0192B48F8423320157B891D6390E2CCD96D6
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/E4flgD7bLIBptnfcRSImsx5L57g.roa
Signing time: Tue 22 Oct 2024 14:09:17 +0000
ROA not before: Tue 22 Oct 2024 14:09:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49505
IP address blocks: 45.129.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 10:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:b4:8f:84:23:32:01:57:b8:91:d6:39:0e:2c:cd:96:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: Oct 22 14:09:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1387e5803edb2c8069b677dc452226b31e4be7b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:30:20:02:5c:e9:cf:28:f5:63:34:c3:07:59:
8e:bd:9f:f6:4c:37:b0:12:cf:aa:98:04:00:2d:69:
e3:dc:23:ba:2b:9d:9a:77:04:35:79:eb:4f:ca:8a:
8e:c0:a1:15:ce:d2:6a:bf:0b:7f:9f:5f:28:44:eb:
60:ea:9f:e3:3c:53:50:82:d6:db:0e:b4:4c:ee:34:
7e:ca:a4:64:78:12:4a:55:bf:aa:ea:be:37:4c:11:
bf:d0:94:e1:40:9b:c3:43:31:a7:44:e2:2a:b2:96:
ca:cb:a7:e4:4a:c3:4d:60:2b:01:c0:9b:5d:da:b9:
20:14:a6:c7:ca:6e:da:5b:91:7c:cd:c7:25:80:4b:
f9:dc:72:fc:cc:98:60:47:90:ca:0f:28:48:f0:36:
6a:63:ee:53:d5:48:ee:89:69:e2:97:18:b0:0d:8c:
40:ea:f2:2a:67:7e:19:81:02:c7:47:99:1e:34:8a:
46:8e:0c:db:4c:2a:a4:eb:d1:cc:80:63:ca:ac:4d:
ee:9d:68:7b:7b:7a:d0:48:f4:28:f5:09:06:5f:f7:
df:58:7e:bd:3a:ee:58:cf:05:33:a7:23:3c:f4:11:
13:9a:19:85:98:af:3a:74:38:c1:7e:9e:3c:96:3d:
95:04:9a:8e:a8:df:8d:ce:4d:7f:bf:bf:34:0e:1d:
55:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:87:E5:80:3E:DB:2C:80:69:B6:77:DC:45:22:26:B3:1E:4B:E7:B8
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/E4flgD7bLIBptnfcRSImsx5L57g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.79.0/24
Signature Algorithm: sha256WithRSAEncryption
03:6c:97:2a:fd:b3:60:ce:53:20:73:a3:da:4a:39:74:71:c7:
ab:5a:33:5b:b4:a2:c6:de:27:3e:80:de:3d:32:45:42:87:c6:
1a:5a:18:72:8d:1e:42:c7:74:f3:4f:2e:e7:a3:37:98:65:09:
7e:ab:32:a8:1a:a6:1c:8c:1a:f0:50:aa:f9:32:73:f9:7d:cc:
ab:40:7f:71:0b:32:15:5a:b7:7a:d5:21:7f:02:42:3c:5b:61:
44:f1:f3:22:d0:63:76:56:bc:66:a1:4d:97:eb:ef:8b:0f:1d:
70:44:ea:da:05:ee:ce:5d:99:63:5a:6c:d1:35:15:81:10:b0:
c7:34:df:87:e2:a7:0d:6e:50:70:df:58:f1:e5:6f:3a:0b:62:
d5:22:7b:de:f5:08:db:b0:b9:cf:63:96:98:0d:2d:bd:e1:58:
36:2b:71:43:4f:a3:91:0f:36:8c:de:6e:c2:eb:13:1a:ed:92:
b5:c2:29:79:fb:61:21:81:32:7f:4c:e4:53:cf:ee:07:7e:8c:
6e:e9:1a:47:2c:3d:13:9f:60:61:67:dc:75:85:2c:18:ec:1b:
60:9f:21:e1:bb:41:70:1d:3d:a7:cd:2e:45:54:fd:3b:58:a6:
80:ff:e2:46:4a:68:ad:4c:d5:28:c6:49:16:9e:16:12:7c:e4:
97:57:46:4b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZK0j4QjMgFXuJHWOQ4szZbWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjZDc2MTU5YmZkOWUzMzc1MjNlZTkzMGYzZGYxMTFkNmJh
ZTczMDYwHhcNMjQxMDIyMTQwOTE3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMzg3ZTU4MDNlZGIyYzgwNjliNjc3ZGM0NTIyMjZiMzFlNGJlN2I4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTAgAlzpzyj1YzTDB1mOvZ/2TDew
Es+qmAQALWnj3CO6K52adwQ1eetPyoqOwKEVztJqvwt/n18oROtg6p/jPFNQgtbb
DrRM7jR+yqRkeBJKVb+q6r43TBG/0JThQJvDQzGnROIqspbKy6fkSsNNYCsBwJtd
2rkgFKbHym7aW5F8zcclgEv53HL8zJhgR5DKDyhI8DZqY+5T1UjuiWnilxiwDYxA
6vIqZ34ZgQLHR5keNIpGjgzbTCqk69HMgGPKrE3unWh7e3rQSPQo9QkGX/ffWH69
Ou5YzwUzpyM89BETmhmFmK86dDjBfp48lj2VBJqOqN+Nzk1/v780Dh1VFwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBOH5YA+2yyAabZ33EUiJrMeS+e4MB8GA1UdIwQY
MBaAFMzXYVm/2eM3Uj7pMPPfER1rrnMGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvek5kaFdiX1o0emRTUHVrdzg5OFJIV3V1Y3dZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9mNmFkYTEtN2U4YS00YjNlLWI3ZTgt
Zjg1ODlmNjgyNjkxLzEvRTRmbGdEN2JMSUJwdG5mY1JTSW1zeDVMNTdnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC9mNmFkYTEtN2U4YS00YjNlLWI3ZTgtZjg1ODlmNjgyNjkx
LzEvek5kaFdiX1o0emRTUHVrdzg5OFJIV3V1Y3dZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYFPMA0G
CSqGSIb3DQEBCwUAA4IBAQADbJcq/bNgzlMgc6PaSjl0ccerWjNbtKLG3ic+gN49
MkVCh8YaWhhyjR5Cx3TzTy7nozeYZQl+qzKoGqYcjBrwUKr5MnP5fcyrQH9xCzIV
Wrd61SF/AkI8W2FE8fMi0GN2VrxmoU2X6++LDx1wROraBe7OXZljWmzRNRWBELDH
NN+H4qcNblBw31jx5W86C2LVInve9QjbsLnPY5aYDS294Vg2K3FDT6ORDzaM3m7C
6xMa7ZK1wil5+2EhgTJ/TORTz+4Hfoxu6RpHLD0Tn2BhZ9x1hSwY7BtgnyHhu0Fw
HT2nzS5FVP07WKaA/+JGSmitTNUoxkkWnhYSfOSXV0ZL
-----END CERTIFICATE-----
Generated at Fri Nov 22 13:45:33 2024 by rpki-client on console-fra.rpki-client.org